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Box No. I Basis of the opinion 



1 With regard to the language, this opinion has been established on the basis of the international application in 
the language in which it was filed, unless otherwise indicated under this item. 

□ This opinion has been established on the basis of a translation from the original language into the following 
language , which is the language of a translation furnished for the purposes of international search 
(under Rules 12.3 and 23 1 (b)). 

2 With regard to any nucleotide and/or amino acid sequence disclosed in the international application and 
necessary to the claimed invention, this opinion has been established on the basis of: 

a. type of material: 

□ a sequence listing 

□ table(s) related to the sequence listing 

b. format of material: 

□ in written format 

□ in computer readable form 

c. time of filing/furnishing: 

□ contained in the international application as filed. 

□ filed together with the international application in computer readable form. 

□ furnished subsequently to this Authority for the purposes of search. 

3 □ In addition, in the case that more than one version or copy of a sequence listing and/or table relating thereto 

has been filed or furnished, the required statements that the information in the subsequent or additional 
copies is identical to that in the application as filed or does not go beyond the application as filed, as 
appropriate, were furnished. 

4. Additional comments: 
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Box No V Reasoned statement under Rule 43b/s.1(a)(i) with regard to novelty, inventive step or 
industrial applicability; citations and explanations supporting such statement 



1. Statement 
Novelty (N) 



Yes: Claims 2-14,16-29,31-45,47-48,51 ,54,56-61 
No: Claims 1 ,1 5,30,46, 49-50, 52-53, 55 



Inventive step (IS) 



Industrial applicability (IA) 



Yes: Claims 

No: Claims 

Yes: Claims 

No: Claims 



1-61 
1-61 



2. Citations and explanations 
see separate sheet 
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Re Item V 

Reasoned statement with regard to novelty, inventive step or industrial 
applicability; citations and explanations supporting such statement 

1 Reference is made to the following documents: 

D1 : US-A-5 903 651 (KOCHER ET AL) 1 1 May 1 999 (1 999-05-1 1 ) 
D2: XP001 003705 

D3: KOCHER P C: "ON CERTIFICATE REVOCATION AND VALIDATION- 
FINANCIAL CRYPTOGRAPHY. INTERNATIONAL CONFERENCE, XX, XX, 1998, 
pages 172-177, XP000997209 

2 The present application does not meet the criteria of Article 33(1 ) PCT, because 
the subject-matter of independent claims 1,15, 30, 46, 49, 52, and 55 is not new 
in the sense of Article 33(2) PCT. The document D1 discloses the subject matter 
of claim 1 as follows (the references in parentheses applying to this document): 

- information input/output system comprising (column 1 1 , lines 18-13, "communication 
of medical records") 

- an input/output device (figure 15: 1505 CERTIFICATE ACCEPTOR; column 10, lines 
21-53) 

- an information usage device (figure 15: 1504, CERTIFICATE HOLDER) that performs 
information input/output via the input/output device (column 1 1 , lines 18-13, 
"communication of medical records") 

- wherein the input/output device has the information usage device perform part of 
processing for judging whether the information usage device is one of valid and revoked 
(column 1 1 , lines 1 8-1 3, "... parties holding digital certificates can nhtain tree leaves 
corresponding to their own certificates and supply the tree and corresponding signature 
information along with the certificate . This eliminates the need for certificate recipients 
to independently download a CRL column 10, lines 33-36") 

The same reasoning applies, mutatis mutandis, to the subject-matter of the 
corresponding independent claims 15, 30, and 55, which therefore are also 
considered not new. 

2.1 The document D1 discloses the following method steps and corresponding 
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executing features according to the features of claim 46 (the references in 
parentheses applying to this document): 



- a list generation device for generation an identifier list that includes one or more 
identifiers corresponding to one or more valid or revoked devices (figure 15, tree issuer 
1 501 ; column 1 0, lines 21 -28; figures 4-1 0; column 4, line 5 - column 8, line 26) 

- a list storage unit (column 6, lines 43-46; column 8, lines 16-18, steps 1-3 include 
implicitly such a list storage unit) 

- an acquiring unit operable to acquire on or more identifiers (column 10, lines 23-25) 

- a generating unit operable to arrange the acquired identifiers according to a 
predetermined rule to generate an identifier list that includes the arranged identifiers 
(column 8, lines 1 6-1 8, steps 1 -3) , and to write the generated identifier list to the list 
storage unit (column 8, steps 4 and 5 include implicitly such a writing step) 

The same reasoning applies, mutatis mutandis, to the subject-matter of the 
corresponding independent claims 49 and 52, which therefore are also considered 
not new. 

3 The present application does not meet the criteria of Article 33(1 ) PCT, because 
the subject-matter of claims 56-61 does not involve an inventive step in the sense 
of Article 33(3) PCT. 

The document D1 is regarded as being the closest prior art to the subject-matter 
of claim 56, and discloses (the references in parentheses applying to this 
document): 

- a judging method used in an input/output device (figure 15: CERTIFICATE 
ACCEPTOR 1505) via which an information usage device (figure 15: CERTIFICATE 
HOLDER 1504) performs information input/output (abstract, column 11, lines 18-13, 
" communication of medical records") 

- receiving range information from the information usage device (column 10, lines 31- 
36), the range information showing a target range, specified using the identifier list, that 
includes a target identifier corresponding to the information usage device (figure 1 1 , 
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step 1 1 04; column 8, lines 41 -46, "a leaf node representative of the candidate iterrf) 

NOTE- in D1 the information usage device (figure 1 5: CERTIFICATE HOLDER 1 504) 
forwards the range information that it received from a confirmation issuer to the 
information input/output device. 

- using the received range information in judging whether the information usage device 
is one of valid and revoked (figure 15: CERTIFICATE ACCEPTOR 1505; column 1 0, 
lines 33-36) 

The subject-matter of the present claim 56 differs from D1 in that in the claim the 
the identifier list is outputted from the information input/output device to the 
information usage device that specifies the target range from it. In D1 the identifier 
list is outputted from a tree issuer to a confirmation issuer that searches the target 
mngfi from it (column 8, lines 14-26, "publish the hash three and signed root 
node" "treeless variant in which individual ranges are signed directly"; figure 6; 
flourei 0) (figure 1 5: TREE ISSUER 1 501 ; figure 1 1 , step 1 1 01 , "obtains the 
interval hash three") (figure 1 1 , step 1 1 04; column 8, lines 41 -46, "a leaf node 
representative of the candidate item"). In D1 the confirmation issuer then issues 
that target range information to the information usage device (figure 1 1 : step 
1 1 07) that further forwards this information to the information input/output device 
(column 10, lines 33-36). In D1 the information input/output device (figure 15: 
CERTIFICATE ACCEPTER 1505) is not involved in delivering the identifier list. 

The technical problem solved by the difference to reduce the amount of physical 
entities in a validation system. 

Combining separate logical functionalities residing in separate physical entities 
into a single entity is an obvious design option for the skilled person in order to 
achieve a system with lesser amount of entities. 

The problem to be solved is an indication for the skilled person to combine the 
functionality of a confirmation issuer and a certificate holder (arriving at the 
information usage device of claim 56), and the functionality of the tree issuer and 
the certificate acceptor (arriving at the information input/output device of claim 56) 
and thereby arriving at a method of claim 56. See figure 1 5 of D1 . 
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The above passages have been given in relation to the hash tree embodiment of 
D1 . It should be noted that a similar argumentation is also possible starting from 
the "treeless" embodiment of D1 (figure 1 0), that specifies individually signed 
ranges as in the present application. 

It should be noted that the solution enabling low processing power devices to 
validate other devices by avoiding long CRL searches in those devices is 
disclosed in D1 and the present application is relying on exactly the same solution: 
a confirmation issuer submitting self -verifying confirmations using signed ranges. 
The different distribution of the same logical functionalities in the present 
application does not make it inventive over D1 . 

The same reasoning applies, mutatis mutandis, to the subject-matter of the 
corresponding independent claims 57-61 which therefore are also considered not 
inventive. 

4 Dependent claims 2-1 4, 1 6-29, 31 -45, 47-48, 50-51 and 53-54 do not contain any 
features which, in combination with the features of any claim to which they refer, 
meet the requirements of the PCT in respect of inventive step or novelty (claims 
50 and 53), see documents D1 and D2 and the corresponding passages cited in 
the search report. 

In particular the usage of lists of valid certificates instead of revoked certificates in 
claims 48, 51 , and 54 is known in same context from D2. 

The features of the other dependent claims are either obvious design options for 
the skilled person. 

5 Additionally the present application does not meet the requirements of PCT in the 
following respects: 

5.1 The computer programs and memory mediums (claims 57, 58, 60, 61 ) storing 
computer programs should be claimed by referring to the corresponding methods 
and not by repeating the wording of the corresponding method claims (Article 6 
PCT). 

5.2 The features of the claims are not provided with reference signs placed in 
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parentheses (Rule 6.2(b) PCT). 

5.3 Contrary to the requirements of Rule 5.1 (a)(ii) PCT, the relevant background art 
disclosed in the documents D1 and D2 is not mentioned in the description, nor 
are these documents identified therein. 
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